What you'll do

• Deliver information security for agents and AI
• Hold the vision, roadmap, prioritisation and acceptance for entitlement components that decide what information or insight a given user may see or act on
• Require this service to be readily reusable to prevent each product or channel requiring duplicate access logic where appropriate
• Set the permission model across internal user, client and agent, including the delegated authority, revocation and audit
• Define cross-border rules and who may receive which insight in which market, working with the technology leads who implement them
• Define the management view of entitlements so reporting is safe by construction
• Own the backlog for the entitlement and reference data services and sequence it into increments that deliver usable capability at each release
• Apply entitlements and eligibility to reference and product data
• Specify what entitlement and eligibility require from reference and product data
• Express eligibility and suitability as data rather than process, so a recommendation engine can read them directly
• Consume one aligned set of reference and product definitions rather than maintaining a separate set, working with the business data accountability that owns them
• Ensure the same entitlement decision is reached wherever it is asked, across the direct and relationship-managed client experience
• Partner with compliance and risk stewards as the standing route for turning the policy they own into rules the entitlement services can apply
• Drive discovery, adoption and lifecycle
• Run discovery with the domains, markets and consuming teams that depend on entitlement and reference services, so what is built answers a real access question
• Be accountable for adoption and reuse, measured by how many products, channels and agents call the service instead of building their own access logic
• Instrument the entitlement and reference services so usage can be measured: which consumers call them, how often, and where access logic is still being built locally
• Confirm conformance when a consumer integrates, and stay accountable for reuse by the next one

Reporting line

Reports to the Head of Wealth Platforms, Wealth & Premier Solutions.

Experience

• Proven experience owning entitlements, access control or permissions systems in a financial services or similarly regulated environment
• Experience expressing eligibility, suitability or compliance rules as machine-readable data rather than manual process
• Track record of setting data requirements on definitions or standards held by multiple domain owners
• Familiarity with delegated authority, audit and revocation models for both human and AI/agent-initiated actions
• Experience setting a roadmap and acceptance criteria for services built by technology teams and consumed by multiple products or channels
• Track record of driving adoption of a shared capability, measured by reuse rather than delivery milestones
• Experience leveraging adoption and behavioural data to inform feature enhancements, backlog prioritisation and improvements to user experience
• Stakeholder management experience across risk, compliance and second-line-of-defence functions

Knowledge and capabilities

• Strong understanding of entitlement, authorisation and information-security architecture, including for AI and agent-initiated access
• Working knowledge of suitability, eligibility and cross-border regulatory constraints in wealth management
• Able to translate policy set by second line of defence into data structures an engine can read, without creating or interpreting risk appetite
• Clear grasp of the distinction between ownership of a product definition (domain leads) and the entitlement and eligibility requirements placed on it (this role)
• Clear communicator across risk, compliance, engineering and business audiences
• Practical, pragmatic decision-making under regulatory constraint
• Comfortable withdrawing or reworking capability that adoption data shows is not being used